Information System Security Manager (ISSM) - TS/SCI

Information System Security Manager (ISSM) - TS/SCI

AWS Cloud / RMF

Location: Arlington, VA - Onsite

Clearance Required: Active TS/SCI

Employment Type: Full-Time

ABOUT SBS

Strategic Business Systems, Inc. (SBS) delivers AWS-aligned mission-critical cloud, cybersecurity, software engineering, and data modernization solutions to the U.S. Department of Defense, Intelligence Community, and federal civilian agencies.

We hire engineers, architects, cybersecurity professionals, and consultants who want to perform hands-on work supporting high-impact national-security programs while collaborating directly with AWS Professional Services and Federal customers. Our culture is technical, lean, and clearance-focused, with an emphasis on professional development, certifications, and long-term customer engagements.

POSITION OVERVIEW

SBS is seeking an experienced Information System Security Manager (ISSM) to lead cybersecurity, Risk Management Framework (RMF), and authorization activities supporting Amazon Web Services (AWS) Federal customers operating within highly secure and classified cloud environments.

The ISSM will provide overall security leadership and governance for assigned information systems and cloud environments, ensuring compliance with DoD, Intelligence Community, NIST, and customer cybersecurity requirements. This individual will oversee the development and maintenance of Authorization to Operate (ATO) packages, continuous monitoring programs, vulnerability and risk management activities, and security control implementation across multiple security domains.

The ISSM will serve as a primary cybersecurity interface between customer security leadership, Authorizing Officials and their representatives, ISSOs, ISSEs, cloud engineers, architects, and program leadership.

The ideal candidate combines deep knowledge of RMF and NIST SP 800-53 with experience securing AWS cloud environments and has demonstrated the ability to lead systems through initial authorization and ongoing continuous monitoring.

RESPONSIBILITIES

Security Program Leadership

• Serve as the primary ISSM for assigned information systems and AWS cloud environments.
• Provide cybersecurity leadership, governance, and oversight throughout the system lifecycle.
• Lead and mentor ISSOs and coordinate activities across security, engineering, architecture, and operations teams.
• Establish and maintain system cybersecurity policies, procedures, and security documentation.
• Advise program leadership and customer stakeholders regarding cybersecurity risk, compliance status, and authorization strategy.
• Ensure security requirements are incorporated into system architecture, engineering, deployment, and operations.

Risk Management Framework (RMF) & Authorization

• Lead the complete RMF lifecycle in accordance with DoDI 8510.01, NIST SP 800-37, and NIST SP 800-53 Rev. 5.

• Develop and manage strategies for obtaining and maintaining IATTs and ATOs.

• Oversee development and maintenance of:

• System Security Plans (SSPs)

• Security Control Family Plans

• Security Assessment documentation

• Control Implementation Statements

• Plans of Action & Milestones (POA&Ms)

• Continuous Monitoring documentation

• Risk assessments and authorization artifacts

• Coordinate security control assessments and authorization reviews with customer security organizations and Authorizing Officials.

• Track authorization conditions, findings, vulnerabilities, and POA&M items through closure.

• Maintain system authorization packages within eMASS, Xacta, Keyhole, or equivalent GRC platforms.

AWS Cloud Security

• Provide security oversight for AWS environments supporting IL2, IL4, Secret, and Top Secret workloads.

• Assess AWS cloud architectures against applicable NIST and DoD security controls.

• Partner with cloud architects and engineers to implement secure AWS architectures and services.

• Provide oversight and guidance for AWS-native security capabilities including:

• AWS Security Hub

• Amazon GuardDuty

• AWS Config

• AWS Identity and Access Management (IAM)

• AWS CloudTrail

• AWS Organizations

• Service Control Policies (SCPs)

• AWS Key Management Service (KMS)

• Review proposed architecture and system changes for cybersecurity and authorization impacts.

• Support implementation of security controls within AWS Landing Zones and multi-account environments.

Continuous Monitoring & Vulnerability Management

• Develop and oversee system Continuous Monitoring (ConMon) strategies.

• Review vulnerability assessments, security scans, and compliance findings.

• Establish priorities and timelines for vulnerability remediation based on mission and security risk.

• Oversee POA&M development, management, and closure.

• Coordinate remediation activities with engineering and operations teams.

• Monitor security posture using AWS-native and third-party security platforms.

• Support security tools and environments including:

• ACAS

• Palo Alto

• Elastic

• AWS Security Hub

• AWS Config

• GuardDuty

• Ensure required vulnerability, configuration, and compliance reporting is completed accurately and on schedule.

Security Governance & Compliance

• Ensure systems remain compliant with applicable:

• DoD cybersecurity requirements

• NIST SP 800-53

• DISA STIGs

• DoD Cloud Computing Security Requirements Guide (SRG)

• Customer-specific security policies

• Support cybersecurity inspections, audits, assessments, and authorization activities.

• Identify security risks and provide mitigation recommendations to program and customer leadership.

• Review significant system changes and determine potential impacts to system authorization.

• Promote automation of security controls, evidence collection, compliance monitoring, and reporting where practical.

Collaboration

• Partner with customer security leadership, Authorizing Officials, SCA teams, ISSOs, ISSEs, cloud architects, DevSecOps engineers, and program management.
• Provide cybersecurity guidance throughout system design and implementation.
• Participate in technical and architecture reviews.
• Communicate cybersecurity risks and compliance issues to both technical and non-technical stakeholders.
• Provide leadership during security assessments, audits, and authorization reviews.

REQUIRED QUALIFICATIONS

• Active TS/SCI security clearance.
• 7+ years of Information Assurance, Cybersecurity, Information System Security, or related experience.
• 3+ years supporting RMF and NIST SP 800-53 within DoD, Intelligence Community, or Federal environments.
• Previous experience serving as an ISSM, senior ISSO, Information System Security Engineer (ISSE), or equivalent cybersecurity lead.
• Demonstrated experience leading systems through the RMF authorization process and obtaining/maintaining ATOs.
• Experience developing and reviewing complete authorization packages including SSPs, POA&Ms, security controls, risk assessments, and continuous monitoring documentation.
• Experience managing or providing security oversight for AWS cloud environments.
• Strong knowledge of NIST SP 800-53 security controls and RMF requirements.
• Experience with vulnerability management, security assessments, and compliance activities.
• Ability to work directly with technical engineering teams and customer cybersecurity leadership.
• Strong written and verbal communication skills.

PREFERRED QUALIFICATIONS

• Experience supporting DoD or Intelligence Community classified cloud environments.
• Experience with AWS environments supporting IL4, IL5, Secret, or Top Secret workloads.
• Experience with eMASS, Xacta, Keyhole, or equivalent GRC platforms.
• Familiarity with AWS Landing Zone Accelerator (LZA).
• Experience implementing Zero Trust security principles.
• Experience integrating cybersecurity requirements into DevSecOps and Infrastructure-as-Code environments.
• Experience with automated security compliance and continuous monitoring.
• Knowledge of DISA STIGs and the DoD Cloud Computing SRG.
• DoD 8570/8140 IAM Level III or equivalent certification.

One or more of the following certifications is strongly preferred:

• CISSP
• CISM
• CAP / CGRC
• CASP+ / SecurityX
• CCSP
• AWS Certified Security - Specialty

DESIRED SKILLS

• Strong leadership and cybersecurity program-management capabilities.
• Excellent technical writing and documentation skills.
• Ability to communicate cybersecurity risk to technical teams, program leadership, and government customers.
• Strong analytical, troubleshooting, and risk-management skills.
• Ability to operate independently within classified environments.
• Experience supporting highly regulated DoD, Intelligence Community, or Federal customers.
• Ability to balance mission requirements with cybersecurity and compliance requirements.

Why SBS

SBS is a trusted technology and cybersecurity partner supporting federal agencies, the Department of Defense, Intelligence Community, and leading commercial technology companies.

Our ATOaaS offering is designed to solve a significant challenge for technology providers: navigating the complex security and authorization requirements necessary to bring commercial technologies into government environments.

You'll be part of a team that:

• Works directly with innovative technology companies and government customers
• Helps accelerate the delivery of new technologies into DoD and Intelligence Community environments
• Works across cloud security, ATO, RMF, vulnerability management, and continuous monitoring
• Provides hands-on guidance throughout the authorization lifecycle
• Has direct impact on getting new technology into the hands of government and military users

COMPENSATION & BENEFITS

SBS offers a comprehensive total-rewards package, including a market competitive salary along with:

• Comprehensive medical, dental, and vision coverage; HSA-eligible plan options available

• 401(k) retirement plan with company match (vesting schedule per Plan Document)

• Paid Time Off, federal holidays, and floating holiday for personal observance

• Annual professional development support for AWS certifications, training, and conferences

• Employee referral program where applicable and documented by program policy

• Life, AD&D, and short- / long-term disability insurance

• Telework and flexible-schedule support where mission and contract permit

• Mission-focused federal contractor supporting national-security customers

Target Salary Range: $160,000-220,000. This range reflects the anticipated compensation for this role. Actual salary will be based on a combination of factors, including the position's scope and level of responsibility, the candidate's relevant experience, education, technical expertise, skills and qualifications, geographic location, and applicable business or contractual requirements.

Equal Employment Opportunity

SBS is an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to age, gender, gender identity, sex, sexual orientation, color, race, creed, national origin, religion, marital status, parental status, citizenship status, ancestry, physical or mental disability, genetic information, veteran status, military status, or any other classification protected by federal, state, or local laws.

Accommodations

If you need an accommodation while seeking employment with SBS, please email hr@sbsplanet.com. Accommodations are made on a case-by-case basis.

No Unsolicited Agency Referrals

SBS does not accept unsolicited resumes from staffing agencies. Any resumes submitted without a prior agreement will be considered the property of SBS.